Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/1B4381A700D83209483A0BD2D3A2787F6A191AD4.cer
File: 1B4381A700D83209483A0BD2D3A2787F6A191AD4.cer (raw, json)
Hash identifier: T6qYfXcJYiRXyHJCeZqkPrhugkpuIdK2X8jIc73fOfg=
Subject key identifier: 1B:43:81:A7:00:D8:32:09:48:3A:0B:D2:D3:A2:78:7F:6A:19:1A:D4
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 6624DB6044DB6F97D67651128ADEF37FED0CC22B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/74A3MPCwX7JL3jQK9r5dGAiHuo9VSMjKTN5Ngqk6vZPS/0/1B4381A700D83209483A0BD2D3A2787F6A191AD4.mft
caRepository: rsync://rpki-repo.registro.br/repo/74A3MPCwX7JL3jQK9r5dGAiHuo9VSMjKTN5Ngqk6vZPS/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Tue 11 Feb 2025 18:09:27 +0000
Certificate not after: Tue 10 Feb 2026 18:14:27 +0000
Subordinate resources: AS: 61751
IP: 131.72.252.0/22
IP: 168.228.40.0/22
IP: 2804:1bcc::/32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:24:db:60:44:db:6f:97:d6:76:51:12:8a:de:f3:7f:ed:0c:c2:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Feb 11 18:09:27 2025 GMT
Not After : Feb 10 18:14:27 2026 GMT
Subject: CN=1B4381A700D83209483A0BD2D3A2787F6A191AD4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:48:45:f2:14:d1:21:ec:dc:0f:26:e0:67:cb:
0d:ac:19:a6:0e:16:8d:66:c8:9f:57:a8:e4:7c:4c:
d6:81:48:b0:c2:15:d8:93:f0:a7:1d:c2:20:7c:b8:
ac:d8:f3:a2:09:3c:f0:11:fd:02:f5:36:e8:2c:36:
29:95:05:44:a8:0d:dc:1a:ee:d7:f7:72:68:93:88:
0d:15:52:bb:4c:e7:79:97:f5:70:cd:0f:68:f3:41:
ec:42:1a:be:f2:ca:90:73:19:b2:c1:be:56:8c:eb:
60:57:3b:2b:b9:cf:2b:69:ef:44:37:1e:83:e4:5e:
25:7b:53:ad:6a:1c:dd:d7:34:e1:98:14:c6:ef:5b:
5a:d1:23:74:eb:64:9a:60:94:9c:4f:93:38:67:db:
43:bc:fe:c8:7f:ad:98:cf:82:3d:6a:21:fd:2e:e6:
18:02:92:8c:83:a0:b1:12:a5:05:d0:97:58:39:4c:
a8:5e:09:fd:a0:36:c9:6c:e9:e0:e9:a1:a5:b8:26:
2e:08:7b:de:5f:55:17:38:df:be:25:47:84:31:98:
89:fa:ce:57:24:d4:f0:aa:37:64:15:ed:62:e4:8a:
a2:8d:8b:ba:da:aa:d6:a6:d8:52:88:8a:28:f6:00:
42:36:f1:42:d4:3c:49:ff:94:db:83:92:37:57:9b:
42:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
1B:43:81:A7:00:D8:32:09:48:3A:0B:D2:D3:A2:78:7F:6A:19:1A:D4
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/74A3MPCwX7JL3jQK9r5dGAiHuo9VSMjKTN5Ngqk6vZPS/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/74A3MPCwX7JL3jQK9r5dGAiHuo9VSMjKTN5Ngqk6vZPS/0/1B4381A700D83209483A0BD2D3A2787F6A191AD4.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.72.252.0/22
168.228.40.0/22
IPv6:
2804:1bcc::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
61751
Signature Algorithm: sha256WithRSAEncryption
c7:2d:6a:3e:d4:ae:a1:f0:cd:59:98:00:54:9b:ee:ee:04:41:
c3:d5:1e:ff:2f:30:64:0e:92:40:6d:7e:d6:53:9f:83:bb:3e:
7a:6d:e3:17:9a:00:b2:16:ad:44:40:17:4f:07:87:a7:5c:1c:
92:6f:ee:6e:44:3a:23:b7:19:3d:d0:6d:0b:ae:67:77:5b:a6:
9a:db:a7:78:3b:61:d6:79:a9:ad:9a:66:9a:29:83:3c:56:0f:
de:1e:d2:cf:79:ff:82:cb:18:70:47:26:7e:8b:87:1e:b8:57:
56:70:2e:86:f8:40:cc:77:2c:b3:71:32:a5:c4:e3:10:90:7a:
e8:17:db:5a:32:11:49:66:8c:9c:78:82:2a:d5:3c:3d:02:89:
63:db:56:11:73:f4:da:01:ba:52:53:ec:37:22:78:8b:00:aa:
cd:b1:6f:a7:2b:6b:29:fe:90:03:74:27:65:ea:42:98:f9:de:
f4:a9:53:b7:1c:c8:6c:b1:2e:0e:c7:f0:06:5a:73:a9:10:c2:
fc:4e:b4:1b:6a:63:5b:ab:07:41:89:aa:08:4d:b5:34:06:df:
bc:b8:e1:fa:1f:60:3d:09:2b:90:c7:c2:f2:5c:34:72:c4:76:
0c:69:d6:0f:37:4a:6e:59:d8:20:47:52:28:88:43:d7:94:60:
28:ec:7f:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 17:31:55 2025 by rpki-client